Some ISPs will say they don't "support" or "allow" it in their legalese, but it's just words they never enforce. It seems ridiculous to me as a customer to have an Internet connection yet only use it for outbound connections, and I've never had a problem running public-facing services on my "consumer grade" home connection.